e693f206f5
fix(self-hosted): remove expose of app.settings.jwt_secret ( #45003 )
2026-09-15 19:38:21 +02:00
8c7a4d9dbb
chore(self-hosted): update 2026-09-09 - 0.8.1 ( #50172 )
2026-09-09 15:45:54 +02:00
04ddc6bef8
chore: update cors for pg routes ( #49136 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Bug fix - config hardening
## What is the current behavior?
CORS is applied at the global level in a permissive mode
## What is the new behavior?
Self-hosted envoy config should apply CORS to the `/pg` routes. These
should only be called from the studio dashboard (when called via a
browser).
uses `SUPABASE_PUBLIC_URL`, which should mean this isn't a breaking
change.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Security & Access**
* Added stricter CORS controls for the `/pg/` route.
* Requests are limited to the configured public URL and localhost
origins.
* Standard HTTP methods and headers are supported, with preflight
responses cached for one hour.
* **Documentation**
* Updated self-hosting guidance to describe the `/pg/` route’s CORS
policy.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-08-17 10:28:09 -07:00
5a8eecf509
feat(self-hosted): envoy is the default api gateway ( #48153 )
2026-08-11 11:55:26 +02:00
9e225a279b
chore(self-hosted): update 2026-08-03 ( #48649 )
2026-08-03 18:21:35 +02:00
4466cc4e45
fix(self-hosted): override dns ttl in kong config to avoid wrong routing ( #47846 )
2026-07-30 17:29:12 +00:00
9cf6ae1f67
feat(self-host): functions expose jwks ( #45635 )
2026-07-08 15:32:12 +02:00
244301c09d
chore(self-hosted): update 2026-07-07 ( #47696 )
2026-07-07 17:29:49 +02:00
9777f051d6
feat(self-hosted): restrict rest root anon ( #45462 )
2026-07-07 13:16:23 +02:00
e7abda8dce
fix(self-hosted): change default api external url to contain /auth/v1 ( #47640 )
2026-07-07 12:28:47 +02:00
02ada3efe3
fix(docker): move hardcoded Realtime DB_ENC_KEY to .env variable ( #46021 )
2026-07-01 14:51:02 +02:00
d60d562570
docs(self-hosting): podman-compose >= 1.6.0 supports nested interpolation ( #47162 )
2026-07-01 13:33:46 +02:00
6cf174b925
feat(self-hosted): change the default db version to postgres 17 ( #46981 )
2026-06-17 15:28:20 +02:00
d002ebe7e5
fix(self-hosted): use postgres user instead of supabase_admin for studio ( #47022 )
2026-06-17 14:43:24 +02:00
712387bbac
fix(self-hosted): add healthcheck to rest (PostgREST) service ( #46658 )
2026-06-12 11:09:55 +02:00
aeca45d4de
fix(self-hosted): use explicit /bin/sh for kong entrypoint ( #46873 )
2026-06-12 10:58:06 +02:00
9db45c7fd9
fix(docker): add healthcheck to edge functions container ( #46655 )
2026-06-08 12:38:03 +02:00
9a78130e42
chore(self-hosted): update 2026-06-03 ( #46610 )
2026-06-03 13:25:48 +02:00
881149c4f9
feat(self-hosted): make analytics optional in compose ( #45327 )
2026-06-03 11:07:31 +02:00
a18539886c
fix(self-hosted): add docker setup for amzn linux and fix comments ( #46504 )
2026-05-29 17:46:13 +02:00
c1276c8e9a
feat(self-hosted): add new API keys to self-hosted Studio and MCP server ( #46173 )
2026-05-22 12:11:00 +02:00
31ca536bcb
fix(self-hosted): add jwt issuer env var to auth config ( #46020 )
2026-05-18 16:31:26 +02:00
af031e2abf
fix(self-hosted): add depends_on analytics for vector ( #46038 )
2026-05-18 16:30:42 +02:00
1f28a37569
fix(self-hosted): allow configuring supavisor tenant db_host via env var ( #41273 )
2026-05-14 22:54:20 +02:00
51c1de7c18
fix(self-hosted): use curl -f in analytics healthcheck ( #45929 )
2026-05-14 13:21:17 +00:00
af762a9c54
chore(self-hosted): update studio to the latest build from 2026-04-27 ( #45291 )
2026-04-28 10:42:45 +02:00
f4fc4ff923
chore(self-hosted): update studio image 2026-04-27 ( #45261 )
2026-04-27 16:09:45 +02:00
cc4d985c40
feat(docker): remove superuser access ( #42975 )
2026-04-22 11:24:58 +02:00
76f41c8e4f
fix(self-hosted): adjust docker compose for better compat with podman ( #44754 )
2026-04-13 18:30:43 +02:00
f2d1c7aea0
fix(self-hosted): studio container shouldn't depend on host's ipv6 stack ( #44772 )
2026-04-13 12:50:01 +02:00
e3626b2d0c
chore(self-hosted): update images 2026-04-08 ( #44632 )
2026-04-08 16:34:22 +02:00
f128106801
feat(self-hosting): add SAML SSO env config and open Kong routes ( #43385 )
2026-04-01 15:42:36 +02:00
30e78d59c0
fix(self-hosted): replace deprecated imgproxy env var ( #43919 )
2026-03-18 15:55:48 +00:00
c3701936b7
fix(self-hosted): increase timeouts for supavisor ( #43905 )
2026-03-18 10:47:03 +00:00
d067569680
fix(self-hosted): improve kong config for logging and dns lookups ( #43874 )
2026-03-17 18:32:52 +01:00
d8947c1194
chore(self-hosted): update image versions 2026-03-16 ( #43826 )
2026-03-17 13:27:01 +01:00
6190518640
add new opaque api keys and new auth to self-hosted
2026-03-16 12:00:10 +01:00
a8ca6fed2c
fix(self-hosted): do not use quotes for default value of rest env
2026-03-12 18:30:12 +00:00
b7cbc11d21
add data api page to integrations for self-hosted
2026-03-12 15:50:07 +01:00
001faf98b6
docs: add https proxy how-to for self-hosted ( #43293 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
- Add a new how-to guide covering PR #43291
- Explain how to use an https proxy on top of [self-hosted
Supabase](https://supabase.com/docs/guides/self-hosting ) API gateway
(Kong)
---------
Co-authored-by: Chris Chinchilla <chris.ward@supabase.io >
2026-03-03 17:09:46 +00:00
28808d2c9f
docs: add oauth and otp how-to guides for self-hosted ( #43286 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
- Add two new how-to guides covering OAuth and OTP/MFA configuration for
[self-hosted Supabase](https://supabase.com/docs/guides/self-hosting )
- Add placeholder environment variables to `.env.example` and
`docker-compose.yml`
---------
Co-authored-by: Chris Chinchilla <chris@chrischinchilla.com >
Co-authored-by: Chris Chinchilla <chris.ward@supabase.io >
2026-03-03 17:33:20 +01:00
b5cb4548b6
add a how-to for self-hosted edge functions
2026-02-25 21:44:19 +01:00
b9ec8927c4
use chainguard images for minio and tidy up configs
2026-02-18 18:46:36 +01:00
97d9865ed4
feat(docker): add deno-cache volume and use Deno.serve
2026-02-18 18:34:34 +01:00
1d06ec8154
chore: update images for self-hosted
2026-02-16 16:51:43 +00:00
3aef6f08b8
feat(self-hosted): update vector service and config
2026-02-16 14:10:47 +00:00
f24df26d7b
fix: do not expose analytics by default
2026-02-16 13:23:16 +01:00
26c615ca4a
fix(self-hosted): add s3 client config and fix minio config
2026-02-15 21:51:04 +01:00
a452e9a9a4
fix(storage): update storage to 1.37.1 to resolve migrations ( #42504 )
2026-02-05 10:45:13 -03:30
1862b71745
feat(studio-local): functions management api - list functions ( #40690 )
...
## What is the current behaviour?
Functions page on self-hosted differs from Platform
## What is the new behaviour?
Adds the possibility to see a list of edge-functions in Self-Host
version.
## Summary by CodeRabbit
* **New Features**
* Added self-hosted edge functions support with filesystem-based
artifact listing and a new API endpoint to list local functions.
* Improved functions UI: unified view, enhanced search and adjacent sort
controls, and clearer local-hosting guidance.
* **Chores**
* Added environment configuration and docker volume for edge functions
management.
* Updated build/task config to pass through edge functions env and
include contentlayer outputs.
Co-authored-by: Ali Waseem <waseema393@gmail.com >
Co-authored-by: Charis Lam <26616127+charislam@users.noreply.github.com >
Co-authored-by: Terry Sutton <saltcod@gmail.com >
2026-01-30 08:00:21 +08:00
Manuel Rubio